Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
File: BDaS8qHRvHb_f50pCRvtoIt7yWw.mft (raw, json)
Hash identifier: P7DHzE5IPhXvcA1WxMWPTdUJhYgEsULjDyWzbB6gCL4=
Subject key identifier: E3:27:15:0F:93:C1:31:4B:9C:4A:F3:AF:57:07:B6:F4:AE:F6:55:3C
Authority key identifier: 04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
Certificate issuer: /CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Certificate serial: 0197B63277662101368E55456BA5C7F0B64E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 11:00:50 +0000
Manifest this update: Sat 28 Jun 2025 11:00:50 +0000
Manifest next update: Sun 29 Jun 2025 11:00:50 +0000
Files and hashes: 1: BDaS8qHRvHb_f50pCRvtoIt7yWw.crl (hash: t2N5Mes5m69VWi2qHfEuXsirhNx9lnOTB8ELuTSHSc4=)
2: F5ASQ_x2NzqLG2YPK-IJMnC68oA.roa (hash: rL17KB2ZeYz5uA3Maczd8dyCWpJw7h3YziKqc9PF9RM=)
3: fKRgm3J38CdqPYWraPnwaBHZfSw.roa (hash: faZcv/HNNKoTcf9eyD+mOEilysgTYS2fYEJ0tHKXiUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:77:66:21:01:36:8e:55:45:6b:a5:c7:f0:b6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Validity
Not Before: Jun 28 11:00:50 2025 GMT
Not After : Jun 29 11:00:50 2025 GMT
Subject: CN=e327150f93c1314b9c4af3af5707b6f4aef6553c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:70:e0:67:f4:ad:dc:0b:6a:7e:53:d8:7d:
ec:5b:f5:58:ef:96:d8:cc:67:c8:1c:6e:11:c3:6f:
43:9f:da:15:2f:36:b9:14:7c:81:49:b9:cf:00:80:
3d:40:71:34:ad:43:fb:93:b0:26:b6:12:ac:fa:79:
39:13:91:4f:92:dd:cf:aa:47:d2:d4:fc:e0:2c:39:
05:42:7d:23:5b:74:73:48:b8:90:77:7e:66:b9:de:
ea:f4:d2:cc:60:7e:ce:dc:d6:02:d5:33:23:06:6a:
6e:48:b4:c6:57:3e:e5:cf:0f:c1:8a:41:24:25:e6:
0b:57:44:a9:d9:8b:88:84:ef:ca:17:3c:de:a9:d4:
28:02:06:34:22:03:60:f2:a7:76:56:4d:42:1a:6b:
c9:da:9e:9a:c7:23:30:ee:d4:3f:d3:c4:42:98:1d:
fd:07:52:af:35:89:a5:c9:18:05:a9:93:0f:bb:c3:
b0:01:5d:07:b3:ac:d7:ad:23:0a:9f:05:7d:f2:6d:
82:39:7e:bb:ad:38:1f:56:29:04:07:84:17:c3:e6:
3e:62:7a:d4:73:62:ba:21:03:39:26:e8:e4:d8:62:
28:e8:42:f1:8d:33:38:12:55:5d:9d:53:a9:0d:18:
d7:75:1f:e7:eb:97:81:d5:06:30:4b:5c:20:ca:ae:
ca:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:27:15:0F:93:C1:31:4B:9C:4A:F3:AF:57:07:B6:F4:AE:F6:55:3C
X509v3 Authority Key Identifier:
keyid:04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a6:fc:81:f5:21:e8:48:17:b9:23:a0:9e:5c:a2:a8:f7:08:
6c:f1:61:73:12:7a:90:e2:fb:d8:58:d5:13:e8:ae:99:7f:09:
0d:97:69:0a:1a:22:c8:fe:2b:f1:d9:43:6a:46:e6:0d:25:0f:
ae:40:d3:5e:e9:c6:43:e7:da:49:5e:9f:5d:56:b7:e3:65:35:
bc:28:c8:1e:55:c3:5f:46:9b:38:2f:3b:47:01:dc:e5:b3:06:
9b:99:99:97:06:b1:b3:0d:c9:53:c3:bc:f1:72:59:fb:87:9a:
75:89:af:82:8d:dd:3b:8e:23:36:43:1e:30:70:b2:fd:ac:fc:
07:0b:7d:f0:a1:17:c4:82:3e:ba:96:2d:28:25:1c:a1:e0:0d:
bf:49:27:cb:ef:fc:75:13:71:32:f8:dd:44:39:67:4e:12:2e:
80:e3:df:be:61:43:d0:46:10:81:78:f7:9f:24:3c:1c:ca:7b:
b1:c7:68:1e:ce:d2:1a:ba:2b:14:ea:8a:4f:2a:e5:1e:5b:a6:
bd:dd:9a:bb:61:43:aa:ac:75:cf:ad:b7:c8:82:af:42:18:f5:
df:67:cc:b7:2e:0e:36:0a:96:92:dc:83:82:52:ce:d4:d6:e4:
a0:5d:98:0a:df:20:df:fb:77:f1:6a:20:7c:e7:13:31:dc:13:
26:74:a2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:42 2025 by rpki-client